Known vulnerabilities in Red Hat Process Automation Manager (formerly JBoss BPM Suite)

Vendor: Red Hat Inc.
Software: Red Hat Process Automation Manager (formerly JBoss BPM Suite)
Software CPE: cpe:2.3:a:red_hat:jboss_bpm_suite:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 143
Public exploits: 21
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Process Automation Manager (formerly JBoss BPM Suite) Red Hat Process Automation Manager (formerly JBoss BPM Suite) is affected by 143 known vulnerabilities: 2 critical, 38 high, 83 medium, 20 low Critical High Medium Low

Vulnerabilities (143)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072		 CWE-770 Medium
No
No
 7.13.5 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU82141 - Improper input validation
CVE-2023-22081		 CWE-20 Medium
No
No
 7.13.4 SP2 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU82143 - Improper input validation
CVE-2023-22025		 CWE-20 Low
No
No
 7.13.4 SP2 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 36 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 7.13.4 SP2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 648 more
#VU81453 - Use After Free
CVE-2023-4813		 CWE-416 Medium
No
No
 7.13.4 SP1 04.10.2023 SB2023100435
SB2023100579
SB2023100581
and 91 more
#VU81447 - Use After Free
CVE-2023-4806		 CWE-416 Medium
No
No
 7.13.4 SP1 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU81437 - Memory corruption
CVE-2023-4911		 CWE-119 Low
Available
Exploited
 7.13.4 SP1 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU81097 - Out-of-bounds read
CVE-2023-4527		 CWE-125 Medium
No
No
 7.13.4 SP1 25.09.2023 SB2023092525
SB2023100345
SB2023100402
and 79 more
#VU80813 - Security Features
CVE-2023-4853		 CWE-254 Medium
No
No
 7.13.4, 7.13.4 SP1 15.09.2023 SB2023091507
SB2023092243
SB2023092247
and 13 more
#VU80783 - Incorrect Conversion between Numeric Types
CVE-2023-3635		 CWE-681 Medium
No
No
 7.13.5 14.09.2023 SB2023091430
SB2023091528
SB2023100937
and 47 more
#VU80228 - Cleartext Transmission of Sensitive Information
CVE-2023-40217		 CWE-319 Medium
No
No
 7.13.4 SP2 01.09.2023 SB2023090142
SB2023090143
SB2023090144
and 139 more
#VU80019 - Server-Side Request Forgery (SSRF)
CVE-2022-44730		 CWE-918 Medium
No
No
 7.13.5 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 15 more
#VU80018 - Server-Side Request Forgery (SSRF)
CVE-2022-44729		 CWE-918 Medium
No
No
 7.13.5 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 25 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 7.13.5 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU76453 - NULL Pointer Dereference
CVE-2022-4285		 CWE-476 Low
No
No
 7.13.4 SP2 23.05.2023 SB2023052341
SB2023052342
SB2023052436
and 38 more
#VU75141 - Memory corruption
CVE-2023-29491		 CWE-119 Low
No
No
 7.13.4 SP1 14.04.2023 SB2023041454
SB2023052328
SB2023052346
and 132 more
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Available
No
 7.13.5 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 7.13.5 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU69283 - Out-of-bounds write
CVE-2022-40151		 CWE-787 Medium
No
No
 7.13.5 14.11.2022 SB2022111420
SB2022122822
SB2023012670
and 32 more
#VU10219 - Command injection
CVE-2017-12629		 CWE-77 High
Available
No
 7.13.2 24.01.2018 SB2017101213
SB2018022813
SB2017110605
and 11 more


Showing elements 1 - 20 out of 143